@garygentry/system1-core 0.1.0

package/dist/decide.js

@@ -0,0 +1,87 @@
+import { assertConsent } from "./config/consent.js";
+import { scrubQuestions, scrubState } from "./egress/scrub.js";
+import { assertStateFits } from "./egress/size.js";
+import { DecisionsError } from "./errors.js";
+import { fixtureKey } from "./fixtures/store.js";
+import { undecidedNames } from "./model/answers.js";
+import { assertQuestionSet } from "./model/validate.js";
+const ZERO = { input_tokens: 0, output_tokens: 0, cost: 0 };
+export function createDecider(options) {
+    const { profile, transport, fixtures, ledger, session } = options;
+    const now = options.now ?? (() => new Date());
+    const mode = (options.mode ?? "auto") === "auto"
+        ? transport
+            ? "live"
+            : "replay"
+        : options.mode;
+    if ((mode === "live" || mode === "record") && !transport) {
+        throw new DecisionsError("no-key", "A live decision needs OPENROUTER_API_KEY. Without one only replay of recorded fixtures is available.");
+    }
+    if ((mode === "record" || mode === "replay") && !fixtures) {
+        throw new DecisionsError("invalid-request", `Mode "${mode}" needs a fixture store`);
+    }
+    const log = (source, model, usage) => ledger?.append({
+        ts: now().toISOString(),
+        ...(session ? { session } : {}),
+        model,
+        source,
+        calls: 1,
+        ...usage,
+    });
+    return {
+        mode,
+        async decide({ state, questions, namespace = "adhoc", signal }) {
+            assertQuestionSet(questions);
+            // The last boundary before the wire. `prepare()` has usually scrubbed
+            // and sized the state already; doing it here too means a caller using
+            // the library directly still cannot send a secret or an oversized
+            // state. Scrubbing is idempotent, so fixture keys are unaffected.
+            const safeState = scrubState(state);
+            const safeQuestions = scrubQuestions(questions);
+            assertStateFits(namespace, safeState, safeQuestions, profile);
+            const request = {
+                model: profile.id,
+                state: safeState,
+                questions: safeQuestions,
+            };
+            const key = fixtureKey(request);
+            if (mode === "replay") {
+                const started = performance.now();
+                const record = fixtures?.lookup(namespace, request);
+                if (!record) {
+                    throw new DecisionsError("replay-miss", `No recorded answer for this request (namespace "${namespace}", key ${key.slice(0, 12)}…). ` +
+                        "Record it with a live call, or set OPENROUTER_API_KEY.", { namespace, key });
+                }
+                log("replay", profile.id, ZERO);
+                return {
+                    source: "replay",
+                    model: profile.id,
+                    servedBy: record.response.model,
+                    answers: record.response.answers,
+                    undecided: undecidedNames(record.response.answers, profile.undecidedFloor),
+                    usage: ZERO,
+                    latencyMs: Math.round(performance.now() - started),
+                    fixtureKey: key,
+                    recordedAt: record.recordedAt,
+                };
+            }
+            // mode is live or record; the constructor guaranteed a transport.
+            assertConsent({ granted: options.egressConsent }, options.repoRoot ?? "this repo");
+            const { response, latencyMs } = await transport.decide(request, signal);
+            const recorded = mode === "record" ? fixtures?.record(namespace, request, response, now()) : undefined;
+            log("live", profile.id, response.usage);
+            return {
+                source: "live",
+                model: profile.id,
+                servedBy: response.model,
+                answers: response.answers,
+                undecided: undecidedNames(response.answers, profile.undecidedFloor),
+                usage: response.usage,
+                latencyMs,
+                fixtureKey: key,
+                ...(recorded ? { recordedAt: recorded.recordedAt } : {}),
+            };
+        },
+    };
+}
+//# sourceMappingURL=decide.js.map

package/dist/decide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decide.js","sourceRoot":"","sources":["../src/decide.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAGnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AA2DvD,MAAM,IAAI,GAAU,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AAElE,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,IAAI,GACR,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,MAAM;QACjC,CAAC,CAAC,SAAS;YACT,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,QAAQ;QACZ,CAAC,CAAE,OAAO,CAAC,IAAoC,CAAA;IAEnD,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,cAAc,CACtB,QAAQ,EACR,sGAAsG,CACvG,CAAA;IACH,CAAC;IACD,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,SAAS,IAAI,yBAAyB,CAAC,CAAA;IACrF,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,MAAoB,EAAE,KAAa,EAAE,KAAY,EAAE,EAAE,CAChE,MAAM,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QACvB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,KAAK;QACL,MAAM;QACN,KAAK,EAAE,CAAC;QACR,GAAG,KAAK;KACT,CAAC,CAAA;IAEJ,OAAO;QACL,IAAI;QACJ,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,EAAE,MAAM,EAAE;YAC5D,iBAAiB,CAAC,SAAS,CAAC,CAAA;YAC5B,sEAAsE;YACtE,sEAAsE;YACtE,kEAAkE;YAClE,kEAAkE;YAClE,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;YACnC,MAAM,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;YAC/C,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;YAC7D,MAAM,OAAO,GAAoB;gBAC/B,KAAK,EAAE,OAAO,CAAC,EAAE;gBACjB,KAAK,EAAE,SAAS;gBAChB,SAAS,EAAE,aAAa;aACzB,CAAA;YACD,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;YAE/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;gBACjC,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;gBACnD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,cAAc,CACtB,aAAa,EACb,mDAAmD,SAAS,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;wBAC1F,wDAAwD,EAC1D,EAAE,SAAS,EAAE,GAAG,EAAE,CACnB,CAAA;gBACH,CAAC;gBACD,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;gBAC/B,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,OAAO,CAAC,EAAE;oBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;oBAC/B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;oBAChC,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC;oBAC1E,KAAK,EAAE,IAAI;oBACX,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;oBAClD,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAA;YACH,CAAC;YAED,kEAAkE;YAClE,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAA;YAClF,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAO,SAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACtF,MAAM,QAAQ,GACZ,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACvF,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;YACvC,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,OAAO,CAAC,EAAE;gBACjB,QAAQ,EAAE,QAAQ,CAAC,KAAK;gBACxB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC;gBACnE,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,SAAS;gBACT,UAAU,EAAE,GAAG;gBACf,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/egress/exclude.d.ts

@@ -0,0 +1,24 @@
+import type { Skipped } from "../sources/types.js";
+/**
+ * Paths never sent to the provider, whatever the source. Config adds to these
+ * (`egress.exclude`); it cannot remove them.
+ */
+export declare const DEFAULT_EXCLUDES: readonly string[];
+export interface ExcludeResult<T> {
+    items: T[];
+    excluded: Skipped[];
+}
+/** Anything path-labelled: a document before splitting, or an item after it. */
+type PathLabelled = {
+    path?: string;
+    realPath?: string;
+};
+/**
+ * Drop items whose path matches an exclude pattern. Every drop is reported
+ * with the pattern that caused it, so the caller can say what was withheld.
+ */
+export declare function applyExcludes<T extends PathLabelled>(items: readonly T[], extra?: readonly string[]): ExcludeResult<T>;
+/** Whether one path is excluded, for checks before a source is read. */
+export declare function isExcluded(path: string, extra?: readonly string[]): string | undefined;
+export {};
+//# sourceMappingURL=exclude.d.ts.map

package/dist/egress/exclude.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exclude.d.ts","sourceRoot":"","sources":["../../src/egress/exclude.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAuB7C,CAAA;AAED,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,KAAK,EAAE,CAAC,EAAE,CAAA;IACV,QAAQ,EAAE,OAAO,EAAE,CAAA;CACpB;AAED,gFAAgF;AAChF,KAAK,YAAY,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAExD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,YAAY,EAClD,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,KAAK,GAAE,SAAS,MAAM,EAAO,GAC5B,aAAa,CAAC,CAAC,CAAC,CAqBlB;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,GAAG,SAAS,CAE1F"}

package/dist/egress/exclude.js

@@ -0,0 +1,60 @@
+import picomatch from "picomatch";
+/**
+ * Paths never sent to the provider, whatever the source. Config adds to these
+ * (`egress.exclude`); it cannot remove them.
+ */
+export const DEFAULT_EXCLUDES = [
+    "**/.env",
+    "**/.env.*",
+    "**/*.pem",
+    "**/*.key",
+    "**/*.p12",
+    "**/*.pfx",
+    "**/*.jks",
+    "**/*.keystore",
+    "**/id_rsa*",
+    "**/id_ed25519*",
+    "**/id_ecdsa*",
+    "**/.npmrc",
+    "**/.pypirc",
+    "**/.netrc",
+    "**/.git-credentials",
+    "**/.aws/credentials",
+    "**/.ssh/**",
+    "**/.docker/config.json",
+    "**/*.tfstate",
+    "**/*.tfstate.*",
+    "**/secrets/**",
+    "**/.system1/credentials",
+];
+/**
+ * Drop items whose path matches an exclude pattern. Every drop is reported
+ * with the pattern that caused it, so the caller can say what was withheld.
+ */
+export function applyExcludes(items, extra = []) {
+    const patterns = [...DEFAULT_EXCLUDES, ...extra];
+    const matchers = patterns.map((p) => ({ p, test: picomatch(p, { dot: true }) }));
+    const kept = [];
+    const excluded = new Map();
+    for (const item of items) {
+        // Both spellings: a symlink's own name and what it resolves to.
+        const paths = [item.path, item.realPath].filter((p) => p !== undefined);
+        const hit = paths.length ? matchers.find((m) => paths.some((p) => m.test(p))) : undefined;
+        if (hit && item.path) {
+            excluded.set(item.path, {
+                path: item.path,
+                reason: "excluded",
+                detail: item.realPath && item.realPath !== item.path ? `${hit.p} (via ${item.realPath})` : hit.p,
+            });
+        }
+        else {
+            kept.push(item);
+        }
+    }
+    return { items: kept, excluded: [...excluded.values()] };
+}
+/** Whether one path is excluded, for checks before a source is read. */
+export function isExcluded(path, extra = []) {
+    return [...DEFAULT_EXCLUDES, ...extra].find((p) => picomatch(p, { dot: true })(path));
+}
+//# sourceMappingURL=exclude.js.map

package/dist/egress/exclude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exclude.js","sourceRoot":"","sources":["../../src/egress/exclude.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,WAAW,CAAA;AAGjC;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,SAAS;IACT,WAAW;IACX,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,cAAc;IACd,WAAW;IACX,YAAY;IACZ,WAAW;IACX,qBAAqB;IACrB,qBAAqB;IACrB,YAAY;IACZ,wBAAwB;IACxB,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,yBAAyB;CAC1B,CAAA;AAUD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAmB,EACnB,KAAK,GAAsB,EAAE;IAE7B,MAAM,QAAQ,GAAG,CAAC,GAAG,gBAAgB,EAAE,GAAG,KAAK,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAChF,MAAM,IAAI,GAAQ,EAAE,CAAA;IACpB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAA;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,gEAAgE;QAChE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;QACpF,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACzF,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;gBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,UAAU;gBAClB,MAAM,EACJ,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;aAC3F,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAA;AAC1D,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAAK,GAAsB,EAAE;IACpE,OAAO,CAAC,GAAG,gBAAgB,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AACvF,CAAC"}

package/dist/egress/scrub.d.ts

@@ -0,0 +1,12 @@
+import type { QuestionSet, State } from "../model/types.js";
+export type ScrubCounts = Record<string, number>;
+export declare function scrubText(text: string, counts?: ScrubCounts): string;
+/** Scrub a state: the string itself, or every string leaf of an object. */
+export declare function scrubState(state: State, counts?: ScrubCounts): State;
+/**
+ * Redact the question set itself. Instructions and criteria are sent with every
+ * request, and an agent can paste content (or a credential) into them, so they
+ * get the same treatment as the state.
+ */
+export declare function scrubQuestions(questions: QuestionSet, counts?: ScrubCounts): QuestionSet;
+//# sourceMappingURL=scrub.d.ts.map

package/dist/egress/scrub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.d.ts","sourceRoot":"","sources":["../../src/egress/scrub.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AA0D3D,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAEhD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,WAAgB,GAAG,MAAM,CASxE;AAED,2EAA2E;AAC3E,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,GAAE,WAAgB,GAAG,KAAK,CAExE;AAwBD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,GAAE,WAAgB,GAAG,WAAW,CAW5F"}

package/dist/egress/scrub.js

@@ -0,0 +1,84 @@
+/** A variable or key name that smells like it holds a credential. */
+const SECRET_NAME = "[A-Za-z0-9_.-]*(?:api[_-]?key|secret|token|passw(?:or)?d|pwd|credential|private[_-]?key|auth)[A-Za-z0-9_.-]*";
+const RULES = [
+    {
+        kind: "private-key",
+        pattern: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+    },
+    { kind: "aws-access-key", pattern: /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g },
+    {
+        kind: "github-token",
+        pattern: /\b(?:gh[pousr]_[A-Za-z0-9]{36,}|github_pat_[A-Za-z0-9_]{22,})\b/g,
+    },
+    { kind: "openrouter-key", pattern: /\bsk-or-(?:v1-)?[A-Za-z0-9]{32,}\b/g },
+    { kind: "anthropic-key", pattern: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g },
+    { kind: "openai-key", pattern: /\bsk-(?:proj-|svcacct-)?[A-Za-z0-9_-]{32,}\b/g },
+    { kind: "slack-token", pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g },
+    { kind: "stripe-key", pattern: /\b[rs]k_(?:live|test)_[A-Za-z0-9]{16,}\b/g },
+    { kind: "google-api-key", pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+    { kind: "jwt", pattern: /\beyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g },
+    { kind: "url-credentials", pattern: /(?<=\b[a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:)[^\s@/]{3,}(?=@)/gi },
+    // NAME = "literal": a quoted value of 8+ chars assigned to a secret-sounding name.
+    {
+        kind: "assigned-secret",
+        pattern: new RegExp(`(?<=\\b${SECRET_NAME}["']?\\s*[:=]\\s*(["']))(?!\\$\\{|<|\\[REDACTED)[^"'\\s]{8,}(?=\\1)`, "gi"),
+    },
+    // NAME = value, unquoted: only when the value holds a digit and is not code
+    // (no call parens, no property path), so `token = getToken()` and
+    // `secret = process.env.SECRET` are left alone.
+    {
+        kind: "assigned-secret",
+        pattern: new RegExp(`(?<=\\b${SECRET_NAME}\\s*[:=]\\s*)(?!\\$\\{|<|\\[REDACTED)(?=[A-Za-z_\\-+/=~]*\\d)[A-Za-z0-9_\\-+/=~]{8,}(?![\\w(.])`, "gi"),
+    },
+];
+export function scrubText(text, counts = {}) {
+    let out = text;
+    for (const rule of RULES) {
+        out = out.replace(rule.pattern, () => {
+            counts[rule.kind] = (counts[rule.kind] ?? 0) + 1;
+            return `[REDACTED:${rule.kind}]`;
+        });
+    }
+    return out;
+}
+/** Scrub a state: the string itself, or every string leaf of an object. */
+export function scrubState(state, counts = {}) {
+    return walk(state, counts);
+}
+/**
+ * A value whose key smells like a credential, e.g. `{"password": "hunter2"}`.
+ * Rules that need `name = value` context can't see a structured field on its
+ * own, so the name is checked here instead.
+ */
+const SECRET_KEY = new RegExp(`^${SECRET_NAME}$`, "i");
+function walk(value, counts, key) {
+    if (typeof value === "string") {
+        if (key !== undefined && SECRET_KEY.test(key) && value.trim().length >= 4) {
+            counts["assigned-secret"] = (counts["assigned-secret"] ?? 0) + 1;
+            return "[REDACTED:assigned-secret]";
+        }
+        return scrubText(value, counts);
+    }
+    if (Array.isArray(value))
+        return value.map((v) => walk(v, counts, key));
+    if (value !== null && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, walk(v, counts, k)]));
+    }
+    return value;
+}
+/**
+ * Redact the question set itself. Instructions and criteria are sent with every
+ * request, and an agent can paste content (or a credential) into them, so they
+ * get the same treatment as the state.
+ */
+export function scrubQuestions(questions, counts = {}) {
+    return Object.fromEntries(Object.entries(questions).map(([name, q]) => [
+        name,
+        {
+            ...q,
+            instructions: scrubText(q.instructions, counts),
+            ...(q.criteria === undefined ? {} : { criteria: scrubState(q.criteria, counts) }),
+        },
+    ]));
+}
+//# sourceMappingURL=scrub.js.map

package/dist/egress/scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.js","sourceRoot":"","sources":["../../src/egress/scrub.ts"],"names":[],"mappings":"AAgBA,qEAAqE;AACrE,MAAM,WAAW,GACf,8GAA8G,CAAA;AAEhH,MAAM,KAAK,GAAoB;IAC7B;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,6EAA6E;KACvF;IACD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gCAAgC,EAAE;IACrE;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,kEAAkE;KAC5E;IACD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC1E,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,gCAAgC,EAAE;IACpE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,+CAA+C,EAAE;IAChF,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mCAAmC,EAAE;IACrE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,2CAA2C,EAAE;IAC5E,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACjE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,oEAAoE,EAAE;IAC9F,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,2DAA2D,EAAE;IACjG,mFAAmF;IACnF;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,IAAI,MAAM,CACjB,UAAU,WAAW,qEAAqE,EAC1F,IAAI,CACL;KACF;IACD,4EAA4E;IAC5E,kEAAkE;IAClE,gDAAgD;IAChD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,IAAI,MAAM,CACjB,UAAU,WAAW,iGAAiG,EACtH,IAAI,CACL;KACF;CACF,CAAA;AAID,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAAM,GAAgB,EAAE;IAC9D,IAAI,GAAG,GAAG,IAAI,CAAA;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YAChD,OAAO,aAAa,IAAI,CAAC,IAAI,GAAG,CAAA;QAClC,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,UAAU,CAAC,KAAY,EAAE,MAAM,GAAgB,EAAE;IAC/D,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,CAAU,CAAA;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,WAAW,GAAG,EAAE,GAAG,CAAC,CAAA;AAEtD,SAAS,IAAI,CAAC,KAAc,EAAE,MAAmB,EAAE,GAAY;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YAChE,OAAO,4BAA4B,CAAA;QACrC,CAAC;QACD,OAAO,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IACvE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,SAAsB,EAAE,MAAM,GAAgB,EAAE;IAC7E,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI;QACJ;YACE,GAAG,CAAC;YACJ,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC;YAC/C,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAiB,EAAE,MAAM,CAAC,EAAE,CAAC;SAC3F;KACF,CAAC,CACY,CAAA;AAClB,CAAC"}

package/dist/egress/size.d.ts

@@ -0,0 +1,16 @@
+import type { ModelProfile } from "../model/profiles.js";
+import type { QuestionSet, State } from "../model/types.js";
+/**
+ * A deliberately conservative token estimate: about 3 characters per token.
+ * Real tokenizers average nearer 4 for English and code, so this
+ * over-estimates. That is the right direction for a limit check and a cost
+ * projection.
+ */
+export declare const CHARS_PER_TOKEN = 3;
+export declare function estimateTokens(value: State | QuestionSet): number;
+/**
+ * @throws DecisionsError `state-too-large`. The state is never truncated,
+ *   because a decision over half an input is a wrong decision.
+ */
+export declare function assertStateFits(id: string, state: State, questions: QuestionSet, profile: ModelProfile): number;
+//# sourceMappingURL=size.d.ts.map

package/dist/egress/size.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"size.d.ts","sourceRoot":"","sources":["../../src/egress/size.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAE3D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,IAAI,CAAA;AAEhC,wBAAgB,cAAc,CAAC,KAAK,EAAE,KAAK,GAAG,WAAW,GAAG,MAAM,CAGjE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,WAAW,EACtB,OAAO,EAAE,YAAY,GACpB,MAAM,CAWR"}

package/dist/egress/size.js

@@ -0,0 +1,25 @@
+import { DecisionsError } from "../errors.js";
+/**
+ * A deliberately conservative token estimate: about 3 characters per token.
+ * Real tokenizers average nearer 4 for English and code, so this
+ * over-estimates. That is the right direction for a limit check and a cost
+ * projection.
+ */
+export const CHARS_PER_TOKEN = 3;
+export function estimateTokens(value) {
+    const text = typeof value === "string" ? value : JSON.stringify(value);
+    return Math.ceil(text.length / CHARS_PER_TOKEN);
+}
+/**
+ * @throws DecisionsError `state-too-large`. The state is never truncated,
+ *   because a decision over half an input is a wrong decision.
+ */
+export function assertStateFits(id, state, questions, profile) {
+    const tokens = estimateTokens(state) + estimateTokens(questions);
+    if (tokens > profile.maxStateTokens) {
+        throw new DecisionsError("state-too-large", `${id} is about ${tokens} tokens with its questions; ${profile.id} accepts ${profile.maxStateTokens}. ` +
+            "Split it smaller (e.g. --split lines:200 or --split hunk).", { id, estimatedTokens: tokens, maxStateTokens: profile.maxStateTokens });
+    }
+    return tokens;
+}
+//# sourceMappingURL=size.js.map

package/dist/egress/size.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"size.js","sourceRoot":"","sources":["../../src/egress/size.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAI7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAA;AAEhC,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACtE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,CAAA;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAU,EACV,KAAY,EACZ,SAAsB,EACtB,OAAqB;IAErB,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;IAChE,IAAI,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,cAAc,CACtB,iBAAiB,EACjB,GAAG,EAAE,aAAa,MAAM,+BAA+B,OAAO,CAAC,EAAE,YAAY,OAAO,CAAC,cAAc,IAAI;YACrG,4DAA4D,EAC9D,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CACxE,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Every failure the engine reports on purpose carries a stable `code`.
+ *
+ * The CLI maps codes onto exit codes (`packages/cli/src/exit-codes.ts`), and
+ * skills branch on them, so a code is part of the contract: add new ones, but
+ * don't rename them.
+ */
+export type ErrorCode = 
+/** The endpoint could not be reached, or kept failing after retries. */
+"provider-unreachable"
+/** The endpoint answered with a non-2xx status that is not worth retrying. */
+ | "provider-http"
+/** A 2xx whose body is not a valid decision response for the request. */
+ | "malformed-response"
+/** A live call was needed but no API key is configured. */
+ | "no-key"
+/** Replay mode, and no recorded fixture matches this request. */
+ | "replay-miss"
+/** The requested model has no profile. */
+ | "unknown-model"
+/** The request itself is invalid (caller bug, not a provider problem). */
+ | "invalid-request"
+/** A live call in a repo that has not consented to sending content off the machine. */
+ | "egress-refused"
+/** The projected spend is over the budget and the caller did not confirm. */
+ | "budget-exceeded"
+/** One state is over the model's limit. Refused, never truncated. */
+ | "state-too-large"
+/** A source could not be read (missing file, bad JSONL, git failure). */
+ | "source-error"
+/** A config or credentials file is invalid or insecure. */
+ | "config-error";
+export declare class DecisionsError extends Error {
+    readonly code: ErrorCode;
+    readonly details: Record<string, unknown>;
+    constructor(code: ErrorCode, message: string, details?: Record<string, unknown>);
+}
+/** A failure on the provider's side, as distinct from a bad question set. */
+export declare class ProviderError extends DecisionsError {
+    readonly status?: number | undefined;
+    constructor(code: "provider-unreachable" | "provider-http" | "malformed-response", message: string, status?: number | undefined);
+}
+export declare function isDecisionsError(error: unknown): error is DecisionsError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,MAAM,SAAS;AACnB,wEAAwE;AACtE,sBAAsB;AACxB,8EAA8E;GAC5E,eAAe;AACjB,yEAAyE;GACvE,oBAAoB;AACtB,2DAA2D;GACzD,QAAQ;AACV,iEAAiE;GAC/D,aAAa;AACf,0CAA0C;GACxC,eAAe;AACjB,0EAA0E;GACxE,iBAAiB;AACnB,uFAAuF;GACrF,gBAAgB;AAClB,6EAA6E;GAC3E,iBAAiB;AACnB,qEAAqE;GACnE,iBAAiB;AACnB,yEAAyE;GACvE,cAAc;AAChB,2DAA2D;GACzD,cAAc,CAAA;AAElB,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,IAAI,EAAE,SAAS;IAExB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAH3C,YACW,IAAI,EAAE,SAAS,EACxB,OAAO,EAAE,MAAM,EACN,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAI/C;CACF;AAED,6EAA6E;AAC7E,qBAAa,aAAc,SAAQ,cAAc;IAI7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IAH1B,YACE,IAAI,EAAE,sBAAsB,GAAG,eAAe,GAAG,oBAAoB,EACrE,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA,EAIzB;CACF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE"}

package/dist/errors.js

@@ -0,0 +1,23 @@
+export class DecisionsError extends Error {
+    code;
+    details;
+    constructor(code, message, details = {}) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = "DecisionsError";
+    }
+}
+/** A failure on the provider's side, as distinct from a bad question set. */
+export class ProviderError extends DecisionsError {
+    status;
+    constructor(code, message, status) {
+        super(code, message, status === undefined ? {} : { status });
+        this.status = status;
+        this.name = "ProviderError";
+    }
+}
+export function isDecisionsError(error) {
+    return error instanceof DecisionsError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAiCA,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE5B,IAAI;IAEJ,OAAO;IAHlB,YACW,IAAe,EACxB,OAAe,EACN,OAAO,GAA4B,EAAE;QAE9C,KAAK,CAAC,OAAO,CAAC,CAAA;oBAJL,IAAI;uBAEJ,OAAO;QAGhB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;IAC9B,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,OAAO,aAAc,SAAQ,cAAc;IAIpC,MAAM;IAHjB,YACE,IAAqE,EACrE,OAAe,EACN,MAAe;QAExB,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;sBAFnD,MAAM;QAGf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,cAAc,CAAA;AACxC,CAAC"}

package/dist/fixtures/store.d.ts

@@ -0,0 +1,34 @@
+import type { DecisionRequest, DecisionResponse } from "../model/types.js";
+/**
+ * Recorded answers, content-addressed so a fixture can only ever replay for the
+ * exact request that produced it.
+ *
+ * Layout: `<dir>/<namespace>/<sha256>.json`, where namespace is a spec name or
+ * `adhoc`. There is deliberately no fallback: a miss is a miss (decision 0010),
+ * because an invented answer is indistinguishable from a real one downstream.
+ */
+export declare const FIXTURE_VERSION = 1;
+export interface FixtureRecord {
+    v: typeof FIXTURE_VERSION;
+    key: string;
+    recordedAt: string;
+    request: DecisionRequest;
+    response: DecisionResponse;
+}
+/**
+ * The fixture key: sha256 of the canonical JSON of `{model, state, questions}`.
+ *
+ * `model` is the *requested* id, so upgrading the model misses the cache instead
+ * of silently replaying the previous model's answers.
+ */
+export declare function fixtureKey(request: DecisionRequest): string;
+/** JSON with object keys sorted at every depth, so key order never changes a hash. */
+export declare function canonicalJson(value: unknown): string;
+export declare class FixtureStore {
+    readonly dir: string;
+    constructor(dir: string);
+    path(namespace: string, key: string): string;
+    lookup(namespace: string, request: DecisionRequest): FixtureRecord | undefined;
+    record(namespace: string, request: DecisionRequest, response: DecisionResponse, now?: Date): FixtureRecord;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/fixtures/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/fixtures/store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAE1E;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,IAAI,CAAA;AAEhC,MAAM,WAAW,aAAa;IAC5B,CAAC,EAAE,OAAO,eAAe,CAAA;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,eAAe,CAAA;IACxB,QAAQ,EAAE,gBAAgB,CAAA;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAG3D;AAED,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAgBD,qBAAa,YAAY;IACX,QAAQ,CAAC,GAAG,EAAE,MAAM;IAAhC,YAAqB,GAAG,EAAE,MAAM,EAAI;IAEpC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAK3C;IAED,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,aAAa,GAAG,SAAS,CAK7E;IAED,MAAM,CACJ,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,gBAAgB,EAC1B,GAAG,OAAa,GACf,aAAa,CAgBf;CACF"}

package/dist/fixtures/store.js

@@ -0,0 +1,74 @@
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+/**
+ * Recorded answers, content-addressed so a fixture can only ever replay for the
+ * exact request that produced it.
+ *
+ * Layout: `<dir>/<namespace>/<sha256>.json`, where namespace is a spec name or
+ * `adhoc`. There is deliberately no fallback: a miss is a miss (decision 0010),
+ * because an invented answer is indistinguishable from a real one downstream.
+ */
+export const FIXTURE_VERSION = 1;
+/**
+ * The fixture key: sha256 of the canonical JSON of `{model, state, questions}`.
+ *
+ * `model` is the *requested* id, so upgrading the model misses the cache instead
+ * of silently replaying the previous model's answers.
+ */
+export function fixtureKey(request) {
+    const { model, state, questions } = request;
+    return createHash("sha256").update(canonicalJson({ model, state, questions })).digest("hex");
+}
+/** JSON with object keys sorted at every depth, so key order never changes a hash. */
+export function canonicalJson(value) {
+    return JSON.stringify(sortKeys(value));
+}
+function sortKeys(value) {
+    if (Array.isArray(value))
+        return value.map(sortKeys);
+    if (value !== null && typeof value === "object") {
+        return Object.fromEntries(Object.keys(value)
+            .sort()
+            .map((k) => [k, sortKeys(value[k])]));
+    }
+    return value;
+}
+const NAMESPACE = /^[a-z0-9][a-z0-9._-]*$/;
+export class FixtureStore {
+    dir;
+    constructor(dir) {
+        this.dir = dir;
+    }
+    path(namespace, key) {
+        if (!NAMESPACE.test(namespace)) {
+            throw new Error(`Invalid fixture namespace "${namespace}" (lowercase letters, digits, . _ -)`);
+        }
+        return join(this.dir, namespace, `${key}.json`);
+    }
+    lookup(namespace, request) {
+        const file = this.path(namespace, fixtureKey(request));
+        if (!existsSync(file))
+            return undefined;
+        const record = JSON.parse(readFileSync(file, "utf8"));
+        return record.v === FIXTURE_VERSION ? record : undefined;
+    }
+    record(namespace, request, response, now = new Date()) {
+        const key = fixtureKey(request);
+        const record = {
+            v: FIXTURE_VERSION,
+            key,
+            recordedAt: now.toISOString(),
+            request,
+            response,
+        };
+        const file = this.path(namespace, key);
+        mkdirSync(dirname(file), { recursive: true });
+        // Write-then-rename so a crash never leaves a truncated fixture behind.
+        const temp = `${file}.${process.pid}.tmp`;
+        writeFileSync(temp, `${JSON.stringify(record, null, 2)}\n`);
+        renameSync(temp, file);
+        return record;
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/fixtures/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/fixtures/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGzC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAA;AAUhC;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,OAAwB;IACjD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC9F,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACpD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aACf,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAE,KAAiC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACpE,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,SAAS,GAAG,wBAAwB,CAAA;AAE1C,MAAM,OAAO,YAAY;IACF,GAAG;IAAxB,YAAqB,GAAW;mBAAX,GAAG;IAAW,CAAC;IAEpC,IAAI,CAAC,SAAiB,EAAE,GAAW;QACjC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,sCAAsC,CAAC,CAAA;QAChG,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,CAAA;IACjD,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,OAAwB;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAA;QACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAkB,CAAA;QACtE,OAAO,MAAM,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1D,CAAC;IAED,MAAM,CACJ,SAAiB,EACjB,OAAwB,EACxB,QAA0B,EAC1B,GAAG,GAAG,IAAI,IAAI,EAAE;QAEhB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QAC/B,MAAM,MAAM,GAAkB;YAC5B,CAAC,EAAE,eAAe;YAClB,GAAG;YACH,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;YAC7B,OAAO;YACP,QAAQ;SACT,CAAA;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACtC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7C,wEAAwE;QACxE,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAA;QACzC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;QAC3D,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACtB,OAAO,MAAM,CAAA;IACf,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,59 @@
+export { assertConsent, setConsent } from "./config/consent.js";
+export type { Budget, Consent, DecisionsConfig, LoadOptions, ResolvedConfig, } from "./config/load.js";
+export { allProfiles, DEFAULTS, findRepoRoot, loadConfig, repoConfigPath, userConfigDir, } from "./config/load.js";
+export type { DetectedSession, Harness } from "./config/session.js";
+export { detectHarness, detectSession } from "./config/session.js";
+export type { DecideInput, DecideMode, Decider, DeciderOptions, DecisionResult } from "./decide.js";
+export { createDecider } from "./decide.js";
+export { applyExcludes, DEFAULT_EXCLUDES, isExcluded } from "./egress/exclude.js";
+export type { ScrubCounts } from "./egress/scrub.js";
+export { scrubQuestions, scrubState, scrubText } from "./egress/scrub.js";
+export { assertStateFits, CHARS_PER_TOKEN, estimateTokens } from "./egress/size.js";
+export type { ErrorCode } from "./errors.js";
+export { DecisionsError, isDecisionsError, ProviderError } from "./errors.js";
+export type { FixtureRecord } from "./fixtures/store.js";
+export { canonicalJson, FIXTURE_VERSION, FixtureStore, fixtureKey } from "./fixtures/store.js";
+export { confidenceOf, DEFAULT_UNDECIDED_FLOOR, isChoice, isNoul, isScore, isUndecided, noulConfidence, rankedProbabilities, undecidedNames, } from "./model/answers.js";
+export type { ModelProfile } from "./model/profiles.js";
+export { DEFAULT_MODEL_ID, PROFILES, projectCost, resolveProfile } from "./model/profiles.js";
+export type * from "./model/types.js";
+export { assertQuestionSet, parseDecisionResponse } from "./model/validate.js";
+export type { PingOptions, PingResult } from "./ping.js";
+export { ping, probeUrl } from "./ping.js";
+export type { Prepared, PrepareInput } from "./prepare.js";
+export { prepare } from "./prepare.js";
+export type { Filter, Op, Projected, SortKey } from "./project/project.js";
+export { matches, parseFilter, parseSort, project as projectRows } from "./project/project.js";
+export type { Projection } from "./run/budget.js";
+export { checkBudget, project } from "./run/budget.js";
+export { mapWithConcurrency } from "./run/pool.js";
+export type { AnswerSource, SpendEntry, SpendSummary } from "./run/spend.js";
+export { SpendLedger, sumUsage } from "./run/spend.js";
+export { gitIgnored, parseFileRef, readSources, splitDiffByFile } from "./sources/read.js";
+export type { Document, Item, LineRange, Skipped, SourceSpec } from "./sources/types.js";
+export type { Expectation } from "./spec/expect.js";
+export { describeExpectation, meets, parseExpect } from "./spec/expect.js";
+export type { Spec, SpecDirs, SpecFile, SpecListing } from "./spec/spec.js";
+export { assertExamples, exampleProblems, listSpecs, loadSpec, parseQuestionSet, parseSpec, SpecSchema, specDirs, } from "./spec/spec.js";
+export type { SplitSpec } from "./split/split.js";
+export { parseSplit, split } from "./split/split.js";
+export type { AskResult } from "./tools/ask.js";
+export { runAsk } from "./tools/ask.js";
+export type { ContextOptions, ToolContext } from "./tools/context.js";
+export { createContext, deciderFor } from "./tools/context.js";
+export type { CheckStatus, DoctorCheck, DoctorOptions, DoctorResult } from "./tools/doctor.js";
+export { CODEX_RULE, runDoctor, which } from "./tools/doctor.js";
+export type { ManyResult, ResultRow, SkippedSummary } from "./tools/many.js";
+export { runMany, summariseSkipped } from "./tools/many.js";
+export type { ToolName } from "./tools/schemas.js";
+export { AskInput, ManyInput, SpecCheckInput, TOOL_SCHEMAS, UsageInput } from "./tools/schemas.js";
+export type { ExampleResult, ExampleStatus, SpecCheckResult } from "./tools/spec-check.js";
+export { runSpecCheck } from "./tools/spec-check.js";
+export type { UsageResult } from "./tools/usage.js";
+export { runUsage } from "./tools/usage.js";
+export type { Transport, TransportOptions, TransportResult } from "./transport/openrouter.js";
+export { createOpenRouterTransport, DEFAULT_TIMEOUT_MS, RETRY_STATUSES, } from "./transport/openrouter.js";
+export { CLI_PACKAGE, VERSION } from "./version.js";
+export type { ConnectionConfig, EnvDeciderOptions } from "./wiring.js";
+export { createDeciderFromEnv, DEFAULT_ENDPOINT, DEFAULT_MODEL, resolveConnection, stateDir, } from "./wiring.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAC/D,YAAY,EACV,MAAM,EACN,OAAO,EACP,eAAe,EACf,WAAW,EACX,cAAc,GACf,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,cAAc,EACd,aAAa,GACd,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAClE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACjF,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACnF,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC7E,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAC9F,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,QAAQ,EACR,MAAM,EACN,OAAO,EACP,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,cAAc,GACf,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAC7F,mBAAmB,kBAAkB,CAAA;AACrC,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC9E,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACxD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAC1C,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAC9F,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAClD,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC5E,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAC1F,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACxF,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC1E,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC3E,OAAO,EACL,cAAc,EACd,eAAe,EACf,SAAS,EACT,QAAQ,EACR,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,QAAQ,GACT,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACpD,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACvC,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC9D,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAC9F,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAChE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAC3D,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAClG,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC7F,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,cAAc,GACf,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACnD,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,QAAQ,GACT,MAAM,aAAa,CAAA"}